$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082/f85def6b-09ba-3066-8e65-6b86437e8e5d.roa File: f85def6b-09ba-3066-8e65-6b86437e8e5d.roa (raw, json) Hash identifier: aCNmDuoZL1YnrlukGedQAETkOuB9zbBB2jTQR3zcGr4= Subject key identifier: 73:52:4A:C3:7A:B2:7F:F2:E4:DD:E1:25:FD:CD:90:36:0D:47:0B:97 Certificate issuer: /CN=8eda9035-7c9b-45a0-b98b-a45be535f082 Certificate serial: 010D0C9F4328584D624A5720F1D66C7F0EE94980 Authority key identifier: 64:FD:D2:B4:D5:A9:0A:A0:F5:66:68:E4:2B:96:51:54:E7:7A:66:73 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082/f85def6b-09ba-3066-8e65-6b86437e8e5d.roa Signing time: Fri 03 Apr 2026 13:00:30 +0000 ROA not before: Fri 03 Apr 2026 13:00:30 +0000 ROA not after: Thu 02 Jul 2026 13:00:30 +0000 asID: 401714 IP address blocks: 2620:98:e00e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082/8eda9035-7c9b-45a0-b98b-a45be535f082.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082/8eda9035-7c9b-45a0-b98b-a45be535f082.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:62:4a:57:20:f1:d6:6c:7f:0e:e9:49:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8eda9035-7c9b-45a0-b98b-a45be535f082 Validity Not Before: Apr 3 13:00:30 2026 GMT Not After : Jul 2 13:00:30 2026 GMT Subject: CN=2a97c251-bc8e-4f19-9bc3-23404dc25ba1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:7a:05:79:11:0a:68:6d:e8:89:c0:2b:96:5d: cb:23:a3:48:66:0a:b4:d5:6b:11:c3:e6:62:60:39: e7:2c:a0:c6:8f:9e:36:5d:42:85:d8:49:38:08:48: e4:85:1f:e5:d4:7e:c6:35:56:9d:90:53:32:6a:42: 87:31:4b:36:75:3c:de:f0:d9:82:d7:8f:1c:66:e1: a0:46:ff:7f:36:ea:20:32:e6:fa:4c:bb:c6:23:55: c5:64:e9:c7:8a:5c:c9:f4:d0:09:aa:30:4f:cb:eb: fe:23:8e:16:17:0f:d7:a3:ad:1d:e2:f3:c9:1f:de: ab:dd:82:87:71:e2:58:72:a2:ad:12:cd:c6:5e:ee: 7c:14:f5:18:82:f6:7c:38:4b:24:5a:e4:82:b0:40: af:38:b0:85:25:ab:3b:58:cf:20:cd:6a:12:5e:18: 8c:ff:3e:6a:a2:c8:84:58:03:f5:df:c5:e8:24:f2: c5:d4:85:6f:9f:d3:a9:06:f5:a2:6d:3d:be:80:ee: 7d:d9:6e:d8:f0:d6:ec:9d:54:10:aa:fe:69:1c:7a: 6b:56:96:e4:e3:09:c1:56:74:a2:ca:d1:77:44:b3: 00:dd:5e:e0:b2:80:6f:da:b3:9b:db:e2:39:d8:9e: 56:5f:6d:fb:33:86:84:ce:ea:47:87:dd:85:b8:d3: 3d:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:52:4A:C3:7A:B2:7F:F2:E4:DD:E1:25:FD:CD:90:36:0D:47:0B:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082/f85def6b-09ba-3066-8e65-6b86437e8e5d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082/8eda9035-7c9b-45a0-b98b-a45be535f082.crl X509v3 Authority Key Identifier: keyid:64:FD:D2:B4:D5:A9:0A:A0:F5:66:68:E4:2B:96:51:54:E7:7A:66:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082.cer sbgp-ipAddrBlock: critical IPv6: 2620:98:e00e::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:1c:62:ad:31:5e:50:19:56:37:c3:f8:00:af:d5:1d:ce:86: 10:37:70:ef:0d:84:c4:e1:e5:46:97:cb:5d:ce:75:cc:d1:d1: 5a:4f:33:52:53:85:a9:a3:01:ad:7d:72:17:5d:c0:1c:5f:2e: 32:b8:bf:7a:1d:81:90:ee:21:cf:8b:48:74:78:ce:80:84:fe: 97:56:f5:2d:5b:77:a0:12:f8:0e:65:9a:47:f3:36:4c:6e:a3: 14:99:22:a5:05:d8:82:0b:e4:ce:66:ae:8c:73:d0:a1:51:24: 96:be:27:d8:28:19:f1:35:1e:5e:f4:79:65:35:c9:a3:8f:d7: 83:08:86:46:d0:d4:68:cd:62:83:c0:01:7b:af:8d:35:50:d7: 36:cc:e1:fb:c6:f6:cc:7b:e4:6e:d8:e9:0d:9a:60:84:f5:d8: e7:b9:e0:b6:47:f2:33:7b:df:ec:25:7a:f5:45:86:bd:f7:d0: 65:90:3d:78:ab:f6:f0:77:43:4a:ce:77:cd:53:76:4d:b8:c7: 04:a3:3e:78:8f:be:b3:de:2a:1c:6c:e4:dc:97:39:e6:fc:d5: 8e:19:19:17:8a:28:2b:c7:0a:d7:6a:f8:a5:43:13:42:40:42: 93:41:c6:7d:6f:39:69:fa:d5:f9:64:f8:bd:39:f7:32:f1:ce: d8:2b:8f:d8 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1iSlcg8dZsfw7pSYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGVkYTkwMzUtN2M5Yi00NWEwLWI5OGItYTQ1YmU1MzVm MDgyMB4XDTI2MDQwMzEzMDAzMFoXDTI2MDcwMjEzMDAzMFowLzEtMCsGA1UEAxMk MmE5N2MyNTEtYmM4ZS00ZjE5LTliYzMtMjM0MDRkYzI1YmExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs3oFeREKaG3oicArll3LI6NIZgq01WsRw+Zi YDnnLKDGj542XUKF2Ek4CEjkhR/l1H7GNVadkFMyakKHMUs2dTze8NmC148cZuGg Rv9/NuogMub6TLvGI1XFZOnHilzJ9NAJqjBPy+v+I44WFw/Xo60d4vPJH96r3YKH ceJYcqKtEs3GXu58FPUYgvZ8OEskWuSCsECvOLCFJas7WM8gzWoSXhiM/z5qosiE WAP138XoJPLF1IVvn9OpBvWibT2+gO592W7Y8NbsnVQQqv5pHHprVpbk4wnBVnSi ytF3RLMA3V7gsoBv2rOb2+I52J5WX237M4aEzupHh92FuNM9yQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHNSSsN6sn/y5N3hJf3NkDYNRwuXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84ZWRh OTAzNS03YzliLTQ1YTAtYjk4Yi1hNDViZTUzNWYwODIvZjg1ZGVmNmItMDliYS0z MDY2LThlNjUtNmI4NjQzN2U4ZTVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOGVkYTkwMzUtN2M5Yi00NWEwLWI5 OGItYTQ1YmU1MzVmMDgyLzhlZGE5MDM1LTdjOWItNDVhMC1iOThiLWE0NWJlNTM1 ZjA4Mi5jcmwwHwYDVR0jBBgwFoAUZP3StNWpCqD1ZmjkK5ZRVOd6ZnMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi84ZWRhOTAzNS03YzliLTQ1YTAtYjk4Yi1hNDVi ZTUzNWYwODIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAmOAO MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABIcYq0xXlAZVjfD+ACv1R3OhhA3cO8NhMTh5UaXy13OdczR0VpP M1JThamjAa19chddwBxfLjK4v3odgZDuIc+LSHR4zoCE/pdW9S1bd6AS+A5lmkfz NkxuoxSZIqUF2IIL5M5mroxz0KFRJJa+J9goGfE1Hl70eWU1yaOP14MIhkbQ1GjN YoPAAXuvjTVQ1zbM4fvG9sx75G7Y6Q2aYIT12Oe54LZH8jN73+wlevVFhr330GWQ PXir9vB3Q0rOd81Tdk24xwSjPniPvrPeKhxs5NyXOeb81Y4ZGReKKCvHCtdq+KVD E0JAQpNBxn1vOWn61flk+L059zLxztgrj9g= -----END CERTIFICATE-----Generated at Fri Apr 17 16:07:42 2026 by rpki-client